Privacy Policy

How Airlift (U.S.A), Inc. collects, uses, protects, and shares information across our website, customer platform, and freight services.

Last updated: September 28, 2026

This privacy policy describes how Airlift (U.S.A), Inc. ("Airlift", "we", "us") handles personal information collected through airliftusa.com, our customer portal and API, and the freight forwarding, customs, warehousing and related services we provide from our offices in the United States, India, Vietnam, Bangladesh and Cambodia. Airlift (U.S.A), Inc., 2629 Townsgate Road, Suite 150, Westlake Village, CA 91361, USA, is the controller of this information.

Our services are provided to businesses. This policy also applies to individuals whose personal information we receive in the course of a shipment, such as shippers, consignees, notify parties and the staff of our customers, carriers and agents, even if they never visit our website.

We use analytics, advertising and visitor-identification cookies unless you tell us not to. You can reject them at any time from the cookie banner, from the Do not sell or share link in our footer, or by sending a Global Privacy Control signal from your browser. Where the law requires your consent for something else, we ask for it separately, and you may withdraw it at any time. Changes to this policy will be posted on this page with an updated date; material changes will be notified in advance as described below.

This policy covers Airlift (U.S.A), Inc. only. If you follow links to other websites, review the privacy policies posted on those sites.

1. Information We Collect

We collect the following categories of information:

  1. Contact and account information you provide โ€” such as name, job title, company, business email address, postal address, phone number, portal login credentials and language preference โ€” when you request a quote, create a portal account, subscribe to updates, or contact us.
  2. Shipment and customs information you provide or that is generated while we handle your freight โ€” such as shipper, consignee and notify-party names and addresses; commercial invoices and packing lists; bills of lading; HTS classifications; importer of record, customs bond and power-of-attorney details; Importer Security Filing (ISF) data; tax and importer identification numbers (such as EIN, IEC, PAN or business registration numbers); and government-issued identification numbers where customs authorities require them.
  3. Business-contact information โ€” the name, role, company and contact details of people who work for our customers, carriers, truckers, agents, warehouses and vendors, received from the person, their employer or public business sources.
  4. Usage information collected automatically โ€” such as IP address, approximate location, browser type, device and operating system, pages visited, referring page, session activity and cookie identifiers, and the company associated with your IP address โ€” via cookies and similar technologies described below.
  5. Communications and billing records โ€” emails, support tickets and call notes, and the information needed to invoice you. Card payments are handled by our payment processor; we do not store full card numbers.

2. How We Use Information

We use your information to:

  1. Fulfill your requests โ€” quoting, booking and managing shipments; coordinating with carriers, agents, truckers and warehouses; sending tracking and service notifications; and providing portal and API access.
  2. Meet legal and regulatory obligations โ€” filing required customs and security documentation such as ISF, customs entries through our licensed brokers, manifest data and export declarations; complying with FMC, CBP and TSA requirements; and screening against sanctions and denied-party lists.
  3. Bill and collect payment โ€” invoicing, payment processing, credit checks and dispute handling.
  4. Provide support โ€” responding to inquiries and handling claims and cargo insurance matters.
  5. Improve our website and services โ€” understanding which pages and tools are used, fixing errors and improving content, based on analytics data collected in accordance with your cookie choice.
  6. Market our services โ€” sending newsletters, rate announcements and tariff updates; measuring the effectiveness of our advertising on Google, Meta and LinkedIn; and identifying businesses that visit our website so our sales team can follow up. We stop the last two for your browser when you reject the advertising and visitor-identification cookies. Every marketing email includes an opt-out.
  7. Protect Airlift and our customers โ€” detecting fraud, securing the portal, and responding to lawful requests.

We do not sell your personal information for money. We do not make automated decisions that have legal effects on you, and we do not use customer data to train artificial-intelligence models.

3. Cookies and Tracking Technologies

The site uses cookies and similar technologies to keep the site working, remember your preferences, measure how visitors use our pages, measure the effectiveness of our advertising, and identify the businesses that visit us. Strictly necessary cookies are always on. The other categories are set when you visit the site unless you reject them, which you may do at any time from the cookie banner, from the Do not sell or share link in our footer, or by sending a Global Privacy Control signal from your browser. When you reject them we stop setting those cookies on your browser and stop sharing your usage data with the providers below. We continue to receive your IP address in ordinary server logs, and use it to keep the site secure and prevent fraud.

  1. Strictly necessary โ€” keeps the site and portal working, remembers your cookie choice and language, keeps you logged in, protects against abuse. Provider: Airlift and Google Translate. Duration: session to 12 months.
  2. Analytics โ€” counts visits, measures which pages and tools are used, and records how visitors scroll, click and move through our public website (heatmaps and session replays, with form entries masked). Providers: Google Analytics and Microsoft Clarity. Duration: up to 24 months.
  3. Advertising and visitor identification โ€” measures our ad campaigns, lets Google, Meta and LinkedIn show you relevant ads on their platforms, and identifies the company associated with your visit so our sales team can follow up with interested businesses. Providers: Google, Meta Pixel, LinkedIn Insight Tag and Apollo.io. Duration: 3 to 24 months.

You can also control cookies through your browser settings, though the portal may not work without strictly necessary cookies, and through each provider's own opt-out: Google Ads Settings, the Google Analytics opt-out, Meta ad preferences and LinkedIn ad settings. Your choice is stored in a strictly necessary cookie on the browser you used, so if you clear cookies or use another browser or device you will need to make it again.

Our marketing emails contain a pixel that tells us whether an email was opened. You can prevent this by blocking images in your email client or by unsubscribing.

4. Service Providers and Sharing

Moving international freight requires sharing shipment information with many parties. We share information only as needed to operate our services:

  1. Logistics execution โ€” ocean carriers, airlines, truckers, rail and warehouse operators; our own offices in India, Vietnam, Bangladesh and Cambodia; and overseas agents and partner forwarders in China and other origin or destination countries where we do not operate directly. They receive the shipper, consignee and notify-party details, cargo descriptions and contact information needed to move, store and deliver your cargo.
  2. Customs and regulatory filings โ€” licensed U.S. customs brokers, who receive full customs entry data including importer identification, invoices, bond and power-of-attorney details; and government authorities including U.S. Customs and Border Protection, the Federal Maritime Commission, the Transportation Security Administration and the customs and port authorities of origin countries, as required for manifests, ISF, customs entries, export and security filings.
  3. Insurance and payments โ€” cargo insurers and surveyors for cover and claims; banks and payment processors for invoicing and collection.
  4. Infrastructure providers โ€” cloud hosting, email, CRM, e-signature, customer support and analytics vendors that process data on our behalf under contracts that restrict their use of the data.
  5. Advertising and sales-intelligence platforms โ€” Google, Meta, LinkedIn and Apollo.io receive website usage data, including IP address and cookie identifiers, through the cookies described above, unless you reject them. Under California law this is treated as "sharing" for cross-context behavioral advertising and, in the case of Apollo.io, may be treated as a "sale"; see the California section below for how to opt out.
  6. Legal and safety โ€” professional advisers, auditors, and governmental agencies or companies assisting in fraud prevention or investigation, when permitted or required by law, or to protect against fraud or unauthorized transactions.
  7. Business transfers โ€” a buyer or successor if Airlift is sold, merged or reorganized; the successor is bound by this policy.

Information is not provided to these parties for their own marketing purposes.

5. International Transfers

Our systems are hosted in the United States. Airlift operates offices in the United States and Asia, and moving international freight inherently involves transmitting shipment information across borders to carriers, agents and government authorities in the origin and destination countries. Information we collect through our offices in India, Vietnam, Bangladesh and Cambodia, from partners in China, and through our website is transferred to and stored in the United States, where privacy law may differ from the law of your country.

We protect transferred information through contractual confidentiality and security obligations on our service providers and agents, limited access for staff who need shipment data for their work, and the security measures described below.

6. Data Security

Your information is protected with industry-standard encryption and security protocols, including encryption in transit on the website, portal and API. Portal data is segregated by customer, and access is limited to authorized employees, agents and contractors who have agreed to keep information secure and confidential. Our service providers are bound by contractual security obligations.

No method of transmission or storage is completely secure. If we learn of a breach affecting your personal information, we will notify you and the relevant authorities as required by law, including within the timeframes set by U.S. state law and India's Digital Personal Data Protection Act. If you have specific security questions, contact us and we will walk you through our practices.

7. Data Retention

We retain personal information only as long as needed for the purpose we collected it, and then for as long as the law requires us to keep the records it is part of:

  1. Customs entry, ISF and import records โ€” 5 years from the date of entry, as required by U.S. Customs and Border Protection (19 CFR Part 163).
  2. Export records โ€” 5 years from the date of export, as required by U.S. export regulations.
  3. Shipping documents, bills of lading and rate records โ€” 5 years, as required by Federal Maritime Commission rules.
  4. Invoices, payments and accounting records โ€” 7 years, for tax and accounting purposes.
  5. Portal account data โ€” for the life of the account and 12 months after closure.
  6. Quote requests that do not become bookings โ€” 24 months.
  7. Correspondence and support records โ€” 3 years after the matter is closed.
  8. Contact information used for marketing โ€” until you opt out or ask us to remove it, after which it is kept only on a suppression list.
  9. Website analytics data โ€” up to 24 months, then aggregated.

When a retention period ends we delete or anonymize the information. Data held in backups is removed on the normal backup rotation schedule.

8. Your Rights and Choices

Wherever you are located, you may ask us to:

  1. access the personal information we hold about you and receive a copy;
  2. correct information that is inaccurate or incomplete;
  3. delete information, subject to records we are legally required to keep;
  4. restrict or object to certain processing, including direct marketing;
  5. withdraw consent where processing is based on consent, without affecting processing already carried out;
  6. receive your information in a portable format where technically feasible.

We will not discriminate against you for exercising any of these rights. To make a request, or to opt out of marketing communications, contact us at privacy@airliftusa.com or at the address below. We will verify your identity, usually by confirming details from your account or shipment, and respond within 30 days, or sooner where local law requires; for requests under U.S. state privacy laws the timelines in the next section apply. If you work for one of our customers or partners and your employer controls the information, we may direct your request to them. Every marketing email also includes an unsubscribe link.

Depending on where you live, you may have additional rights described in the sections that follow.

9. California and U.S. State Privacy Rights

This section applies if you are a resident of California or of another U.S. state with a comprehensive privacy law, and supplements the rest of this policy.

Categories of personal information. In the last 12 months we have collected the following categories of personal information, as defined by the California Consumer Privacy Act (CCPA). None of them are sold for money. The categories marked below are shared for cross-context behavioral advertising:

  1. Identifiers (name, email, phone, IP address, account ID) โ€” shared: IP address and cookie identifiers.
  2. Customer records (address, company, payment details) โ€” not shared.
  3. Commercial information (quotes, bookings, shipment history) โ€” not shared.
  4. Internet or network activity (pages viewed, session data) โ€” shared.
  5. Approximate geolocation (from IP address) โ€” shared.
  6. Professional or employment information (job title, employer) โ€” not shared.
  7. Government identifiers required for customs (importer, tax and ID numbers) โ€” not shared.
  8. Inferences (likely interest in our services, based on site activity) โ€” shared.

The sources, purposes, recipients and retention periods for each category are described in the sections above. We share identifiers, network activity, approximate location and inferences with Google, Meta, LinkedIn and Apollo.io through advertising and visitor-identification cookies, which is "sharing" under the CCPA. We disclose IP addresses and cookie identifiers to Apollo.io to identify the business associated with a website visit; to the extent this is a "sale" under the CCPA, it is covered by the same opt-out. We do not knowingly sell or share the personal information of anyone under 16, and we do not use or disclose sensitive personal information for purposes other than providing our services.

Your rights. You have the right to know what personal information we collect, use, disclose, sell or share; to delete it; to correct it; to opt out of sale or sharing; to limit the use of sensitive personal information; and not to be discriminated against for exercising these rights.

Do Not Sell or Share My Personal Information. To opt out of sale or sharing, use the Do not sell or share link in our footer, or click Reject in the cookie banner. We also honor the Global Privacy Control (GPC) browser signal as a valid opt-out request for the browser that sends it. Once you opt out we stop setting advertising and visitor-identification cookies for that browser and stop sending your usage data to Google, Meta, LinkedIn and Apollo.io.

How to submit a request. Email privacy@airliftusa.com. We will confirm receipt within 10 business days and respond within 45 days; if we need more time we will tell you and may take up to 45 additional days. You may use an authorized agent, in which case we will ask for written authorization and may verify your identity directly with you.

Appeals. If we decline your request and your state grants a right of appeal, you may appeal by replying to our decision. We will respond within 45 days and tell you how to contact your state attorney general if you remain dissatisfied.

We do not offer financial incentives in exchange for personal information.

10. Notice to Residents of India

This section applies if you are in India, supplements the rest of this policy, and is provided under the Digital Personal Data Protection Act, 2023 and the rules made under it.

Data fiduciary. Airlift (U.S.A), Inc. is the data fiduciary for the personal data this policy covers.

Notice and consent. Before or when we collect your personal data we give you a notice, in English or on request in a language listed in the Eighth Schedule to the Constitution, stating the personal data collected, the purpose, how to exercise your rights and how to complain to the Data Protection Board of India. We process your personal data on the basis of your free, specific, informed and unambiguous consent, given by a clear affirmative action, or for a legitimate use recognized by the Act, such as where you have voluntarily provided the data for a purpose and not objected, or where we must comply with a law or court order.

Withdrawing consent. You may withdraw consent as easily as you gave it, by contacting us or, for cookies, from the Do not sell or share link in our footer. We and our processors then stop processing your data for that purpose unless a law requires us to retain it. Withdrawal does not affect lawful processing carried out before it.

Your rights. You have the right to access a summary of your personal data and the processing carried out; to know the fiduciaries and processors with whom it has been shared; to correct, complete, update and erase it; to nominate a person to exercise your rights in the event of your death or incapacity; and to a readily available grievance mechanism. We respond within 30 days. If you are not satisfied with our response you may complain to the Data Protection Board of India.

Raising a grievance. Write to us using the contact details in section 13. Grievances are acknowledged promptly and resolved within 30 days.

The Act requires you not to impersonate another person, not to suppress material information, not to file false or frivolous grievances, and to provide only verifiably authentic information when exercising your rights to correction or erasure.

11. Children's Privacy

Our services are intended for businesses and are not directed to children. We do not knowingly collect personal information from anyone under 16, or under 18 where local law sets a higher age, including India. If you believe a child has provided us with personal information, contact us and we will delete it.

12. Changes to This Policy

We may update this policy from time to time. The "Last updated" date at the top shows the current version. If we make a material change, such as a new purpose or a new category of recipient, we will notify you by email or by a notice on the website or portal before the change takes effect, and where the law requires it we will ask for your consent again. Earlier versions are available on request.

13. Contact Us

If you have any questions, requests or complaints about this privacy policy or the handling of your personal information, please contact us at privacy@airliftusa.com, by phone on +1-310-930-5703, or by post to Airlift (U.S.A), Inc., Attn: Privacy, 2629 Townsgate Road, Suite 150, Westlake Village, CA 91361, USA.

If you are not satisfied with our response, you may complain to your local data protection authority: the California Privacy Protection Agency or your state attorney general in the United States, or the Data Protection Board of India.

We value your privacy

We use cookies to keep our portal working, measure site usage, and analyse the businesses that visit us. Under U.S. state privacy laws, the data we share with our analytics, advertising and sales partners is considered a โ€œsaleโ€ or โ€œsharingโ€ of personal data.